Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File: 9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier: OyFZnqGSgM+GCFR4QDW7EJd1Y1dMtwBn4FaURCVdu6w=
Subject key identifier: 5F:A5:C8:FA:73:62:5F:49:89:94:20:C1:78:5F:B2:43:87:41:3B:76
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer: /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial: 019DA3412E43779B55A29C848112E39875A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number: 139E
Signing time: Sun 19 Apr 2026 01:00:51 +0000
Manifest this update: Sun 19 Apr 2026 01:00:51 +0000
Manifest next update: Mon 20 Apr 2026 01:00:51 +0000
Files and hashes: 1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: NYkioCJU7+KNZ3O21v1yevM03jMjNo8uvd85MKqEZwo=)
2: ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa (hash: /54TVaQGpWQlA0th+KPLCMlkXLtNsFvetSrJmgBZFMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:2e:43:77:9b:55:a2:9c:84:81:12:e3:98:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Validity
Not Before: Apr 19 01:00:51 2026 GMT
Not After : Apr 20 01:00:51 2026 GMT
Subject: CN=5fa5c8fa73625f49899420c1785fb24387413b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:71:3b:9b:f9:e6:e7:0a:aa:03:32:41:b8:
92:09:de:3b:b8:cc:61:17:1a:b2:9a:6a:07:b1:1d:
a8:a4:eb:92:d6:f3:d9:7b:25:02:2a:c8:92:da:c3:
05:6e:aa:60:11:20:1b:16:42:b8:32:32:7d:64:64:
e4:28:c9:c4:a5:ed:34:dd:39:11:1c:bd:06:90:ed:
a1:b3:75:65:03:8f:dc:19:b0:73:4c:d5:b4:6f:34:
4c:d5:e2:09:94:fb:d5:a6:de:60:3c:15:31:37:32:
00:24:79:05:34:3e:47:45:ae:17:78:ce:0c:2e:d3:
38:f2:f2:fc:7c:6a:49:2e:b4:71:f7:ea:7b:72:e7:
ae:08:1b:5f:f9:19:2c:45:70:e8:a8:a9:eb:74:a1:
64:88:08:e0:ad:5d:71:6e:9d:47:85:39:8a:ab:29:
7b:ee:bb:56:0e:74:2c:f7:9d:41:e7:9b:d1:d3:c5:
3a:a7:51:2b:3a:ad:f6:7f:79:e5:43:09:eb:af:3a:
b3:53:82:71:d0:96:3c:87:12:5e:39:8b:75:9a:d4:
d0:f1:33:aa:21:d0:a0:c9:45:bd:c5:82:72:35:5c:
5e:1c:61:a6:71:0b:1f:a7:84:f2:1b:a4:a8:83:ca:
35:f8:ed:af:72:77:dd:88:48:6a:7c:7a:c6:54:6f:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A5:C8:FA:73:62:5F:49:89:94:20:C1:78:5F:B2:43:87:41:3B:76
X509v3 Authority Key Identifier:
keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:cb:31:cf:58:be:96:8e:a9:99:6c:de:a1:3c:57:2c:7e:
31:6e:ff:eb:ef:5b:92:34:4d:b1:ed:b8:c4:50:6c:c4:2e:16:
c3:50:a1:78:03:0b:e1:98:32:6d:90:03:5d:f0:0e:0b:49:5a:
0e:df:da:61:57:dc:a6:48:0e:86:8b:8f:f5:68:47:bb:4d:0b:
06:7f:a7:43:3e:4c:89:3d:65:4b:98:83:24:a7:0e:cf:a1:31:
7a:ca:9b:3e:73:df:fe:b0:9b:0d:06:e1:b7:ed:cd:ce:a2:9d:
25:b4:76:75:de:e7:fa:39:f2:6b:00:94:6f:4d:70:48:ba:a7:
01:bc:bb:73:e9:22:99:49:02:85:58:e7:e2:67:b9:49:c8:db:
6d:d1:26:83:27:bb:27:10:1f:f1:41:8f:c2:32:e3:f1:b6:77:
a2:80:e6:be:e3:dd:9f:78:34:c8:9b:cf:e2:35:1b:d6:a5:2e:
c6:57:df:16:6b:06:08:15:60:69:3f:f0:27:63:69:5e:6d:3c:
2f:a5:b5:92:a4:16:17:ed:4f:5a:d9:69:80:ca:8b:76:5a:c5:
db:7d:43:d3:67:4e:19:b7:34:88:d6:27:2a:54:67:d4:c9:9c:
f4:92:42:14:c7:db:0c:ba:b2:5c:09:7b:f8:0c:a1:8c:ef:75:
fc:31:d2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:21 2026 by rpki-client